DevOps Engineers in Munich

• Built a standalone corporate IT environment — cloud strategy, network, AWS Landing Zone, security requirements, contract negotiations.
• Migrated all applications, helping the client avoid significant contractual penalties.
• Onboarded and managed int...

• Built Azure Kubernetes clusters (AKS) with network policies, security groups, and RBAC
• Terraform-based infrastructure as code for secure, reproducible deployments in the BMW Azure cloud
• Hardened CI/CD pipelines with Jenkins, SonarQube, Fortify SSC, and Contrast AST
• Integrated SAP BTP/Kyma and ServiceNow GRC

• Adaptation, optimization, configuration, and administration of a multi-stage GitLab instance with over 250 users
• Setup, adaptation, expansion, and optimization of infrastructure, configuration, and monitoring
• Provisioning of services and handover to production
• System environment: DependencyTrack, GitLab, Grafana, Hedgedoc, Kubernetes, Oauth2 Proxy, Openstack, Prometheus, Syseleven

• Built and operated an end-to-end MLOps platform on Azure ML and Kubernetes (Kubeflow) for automated deployment, monitoring and scaling of forecasting models (e.g. Temporal Fusion Transformer, Informer, Autoformer)
• Implemented CI/CD pipelines in Azure DevOps for the complete ML lifecycle – from resource provisioning (Terraform), data transformation (Hugging Face Datasets, Pandas, PyTorch, CUDA clusters) through training and evaluation to model registry and endpoint deployment
• Integrated MLflow for experiment tracking, model versioning, performance monitoring and automated registration in Azure Model Registry
• Developed and containerized PyTorch training jobs with CUDA (Azure Notebook, Jupyter Notebooks) for price and time series forecasting (PFC models) with automatic rollout via Azure ML endpoints and REST/gRPC interfaces, Docker containerization, secured with OAuth 2.0
• Set up monitoring and alerting mechanisms (Prometheus, MLflow metrics), centralized logging and cost tracking
• Configured security (OAuth2) and rate limiting via APIM
• Automated infrastructure provisioning and model deployment using Terraform, Helm and Azure CLI; integrated with existing market data systems and event pipelines
• Migrated existing workloads and databases (IONOS → Azure, MongoDB) integrating them into central MLOps workflows and internal networks
• Extended the platform with LLM-based tools (LangChain, LangServe) to integrate GPT-based analysis modules into existing Spring Boot services for market anomaly detection and automated reports
• Analyzed and designed a software solution to efficiently process high-volume data (>3000 messages/sec) (market data store)
• Developed Spring Boot / Java 21 containers with RabbitMQ to distribute market data via MongoDB (Kubernetes) with fast data storage in Redis RMaps, deduplication, forwarding of messages to read model queues and building read models for UI display in MongoDB
• Integrated RESTHeart to generate a REST API for MongoDB
• Migrated to MongoDB ClickHouse for mass ingests and automatic deduplication using the ReplicatedMergeTree engine in ClickHouse
• Built a Python Apache Arrow Flight service for querying the ClickHouse DB in milliseconds for complex queries (gRPC protocol / ClickHouse column-based queries)
• Developed an Angular frontend to simplify data queries and master data maintenance
• Used agentic coding with remote and local LLMs (Claude, Ollama Qwen, OpenLLM) and MCP servers
• Created Python scripts for transforming and cleaning incoming market data (Pandas, scikit-learn)

In my role as Senior Cloud DevOps Architect for BP, an oil and gas company, I had the mission to migrate the Electric Vehicle Charging platform of the EV Division from on-premises and Azure to AWS cloud, resulting in a hybrid multi-cloud, multi-tenant SaaS solution.

Deployment with Kubernetes for the application layer meant provisioning Kubernetes clusters managed by EKS and AKS, with a focus on integrating them into a multi-tenant environment. This integration was achieved by using Kubernetes namespaces and access controls to ensure data isolation and privacy enforcement.

In the database layer, we chose an RDS instance with PostgreSQL to support the backend infrastructure of our applications. Tenants shared the same RDS instance, but each had a dedicated schema.

To ingest near real-time data from physical charge points (CPOs), as IoT devices, via the OCPI protocol, we ran into significant delays with batch processing. As a result, we built a real-time streaming data pipeline using Apache Kafka, while prioritizing an event-driven architecture.

Led collaboration across multiple internal teams, external vendors, cloud providers, and on-site partners to integrate over five systems into a unified solution.

Achievements:

• Successfully designed and implemented hybrid multi-cloud solutions, integrating multiple cloud platforms (AWS, Azure) with on-premises infrastructure, using Site-to-Site VPNs, Firewalls, and Load Balancing.
• Led the migration of on-premises infrastructure to multi-cloud, multi-tenant infrastructure, resulting in 30% faster processing times.
• Migrated workloads from VMware and Hyper-V environments to cloud-based VMs, leveraging cloud-native services to optimize performance, cost efficiency, and scalability.
• Designed a multi-tenant Kubernetes platform leveraging the Kubernetes ecosystem, using Karpenter for dynamic EC2 node provisioning, KEDA for event-driven pod autoscaling (e.g., Kafka message lag), and Rancher for centralized monitoring of multiple clusters (EKS, AKS, or on-prem K8s), replacing Microsoft-centric Azure Arc management service.
• Designed and implemented Python-based FastAPI microservices as part of the EV core-backend on AWS EKS application layer, powering data ingestion and customer analytics pipelines.
• Developed asynchronous, event-driven APIs (Python-FastAPI) for real-time integration with CPOs, supporting OCPI 2.3 and OICP protocols.
• Designed and implemented a secure, production-grade Azure Databricks platform using Terraform, ensuring scalability and cost efficiency.
• Migrated on-premises ERP to a hybrid Dynamics 365 architecture with ERP hosted locally and CRM running in Azure, integrated via Azure Arc.
• Automated CI/CD pipelines for Databricks notebooks and jobs using GitHub Actions & Databricks CLI, reducing deployment time. Reduced infrastructure provisioning time by 70% by automating cloud resource deployment with GitOps.
• Ensured compliance with internal audit and data governance standards (GDPR) through OAuth2/OIDC-based authentication and fine-grained role-based access controls.
• Developed a Zero Trust security model, enforcing least-privilege access and microsegmentation, enhancing security posture and compliance with GDPR and NIST.
• Built interactive analytics dashboards in Amazon QuickSight, integrating data from S3 and Redshift to deliver real-time business insights and visualizations with embedded access for multi-tenant users.
• Led cloud security assessments and full-lifecycle cybersecurity integration during M&A, covering AWS, Azure, IAM (Entra ID), and data protection, while aligning security posture with NIST, ISO 27001, and GDPR across hybrid and cloud-native environments.
• Reduced cloud costs by 64% for a client's dev environment by implementing automated start/stop schedules for EC2 and RDS instances via AWS CDK with EventBridge Scheduler or AWS Systems Manager.

Tech stack:

• Infrastructure as Code: Terraform, AWS CDK, Ansible.
• Containers: Kubernetes on EKS, AKS, Docker.
• Streaming Data Processing: Kafka to Confluent Cloud, after AWS MSK.
• Frontend: TypeScript, React, NextJS, Hooks, Styled Components.
• Backend: Python with FastAPI, also Node.js with NestJS.
• Database: Aurora on PostgreSQL with TypeORM, RDS on SQL Server, Azure Databricks full setup and administration, ETL Pipelines.
• CI/CD and GitOps: GitHub Actions, Azure DevOps, ArgoCD.
• Monitoring and Observability: Prometheus and Grafana.
• Virtualization: Hyper-V, VMware Cloud on AWS, Azure Migrate.
• ERP Systems: Odoo, Microsoft Dynamics 365 Business Central on Azure, integrated with Azure Arc.
• Networking: Site-to-Site VPNs, AWS Direct Connect, Azure ExpressRoute, Firewalls (AWS Network Firewall, Azure Firewall).
• Security: IAM, NIST Framework, Zero Trust Security, AWS WAF, AWS Shield, GuardDuty.

• Further development of the internal "ECockpit" platform with an Angular 17 frontend and .NET (C#) backend
• Maintenance and further development of Azure DevOps pipelines
• Introduction of technical improvements in build & release processes
• Collaboration on a modular architecture approach (Clean Architecture & DDD)
• Focus on scalability and secure data processing
• Tech stack: Angular 17, .NET / C#, Azure, Azure DevOps, Git, CI/CD, Clean Architecture, Domain Driven Design

• Development of dynamic web components for displaying KPIs, intelligent map applications, and operational process analysis tools
• Angular 18+
• Leaflet, MapLibre
• NestJS, JavaScript, HTML, CSS
• PostgreSQL, GraphQL, RabbitMQ
• Gitea, Jenkins, Docker

• Migration of a mainframe application (PL/1, zOS) to the cloud (Azure)
• Data transfer from z/OS (USS) to Azure storage (blob containers, file shares)
• Implementation of the mainframe job control in Java
• Mapping of job network dependencies in Control-M
• Performance analysis and optimization measures
• DB2 (z/OS) migration to Postgres (Azure)
• Technologies: Azure (storage, VM, VMSS, Postgres), z/OS (USS), DB2, Postgres, Packer, Terraform, Docker, Jenkins, GitHub Actions, Control-M
• Tools: Eclipse, Visual Studio Code, IntelliJ

• Windows application migration using Windows Server 2022/2025, DHCP, Active Directory, directory trust and setup, GPO management
• Cloud service automation, firewall and network management, debugging

• Responsible for Openshift/Kubernetes on-prem administration and developer support.
• Developed URP infrastructure automation with Python, Ansible, Kustomize and ArgoCD, Argo Workflow/Events stack.
• Wrote smoke and load tests for URP infrastructure utilizing Python, Kustomize and ApplicationSets.
• Helped to set up and deploy URP infrastructure in Google Cloud, GKE.
• Set up monitoring for URP and ArgoCD stack with Splunk Cloud.
• Performed system administration tasks across RedHat Linux, Kubernetes/Openshift, ArgoCD, GitLab, Bitbucket Enterprise, Kafka and MongoDB.

• Maintained a SaaS billing platform on AWS as part of the Site Reliability Engineering (SRE) team.
• Played a key role in an AWS cloud migration project, implementing Terraform (IaC), creating CI/CD processes and pipelines, hardening images, upgrading tool versions, and developing scripts.
• Wrote documentation.

AWS Cloud migration:

• Design and implement CI/CD for deploying AWS resources using GitLab CI, Terraform, and GitOps.
• Create and configure DevOps toolchain including Jenkins, Harbor, and Vault.
• Deploy billing application, microservices, and supporting infrastructure services to Nomad clusters.
• Re-designed TLS/mTLS certificate management using Vault and Lambda.

Security (Infrastructure Hardening & Patch Management & Vulnerability Scanning):

• Managed multiple AWS accounts for Consul/Nomad/Traefik clusters (10–20 EC2 instances/account, ASG) and DevOps toolchain accounts (Harbor, Jenkins, Vault).
• Created hardened AMIs via Packer based on CIS benchmarks for Nomad, Jenkins, Harbor, and Vault; deployed using Terraform.
• Integrated Trivy via Harbor plugin for container image scanning.
• Implemented strict AWS VPC security group rules.
• Developed and maintained patching process across environments using Qualys and Wiz.
• Deployed Qualys Cloud Agent to all EC2 instances, tracked CVEs and tested patches in lower environments before rollout.
• Automated patch deployment across all AWS accounts using Terraform and GitLab CI and verified patch compliance via Qualys/Wiz dashboards.

• Operations and extensions of Azure DevOps pipelines

• Operations and extensions of AWS services

• Citrix (Windows 10, Bitwarden)

• AWS: ECR, EKS, CloudFront CDN, Route 53, VPC peering and CNI upgrade, Atlas MongoDB, S3 buckets, static website hosting

• Azure: build and deploy with DevOps pipelines

• Spring Boot Software Engineer
• DevOps Engineer (Kubernetes, Azure DevOps)

Toolstack: Java, Spring Boot, Kubernetes, Helm, GitOps, ArgoCD, Docker, Azure DevOps, CI/CD Pipelines, Git, Postgres

• Implementation, maintenance and operation of an ERP system and a document exchange platform for a corrugated cardboard manufacturer.
• Tools and systems: Unix (Debian 6.x), C, SVN, Windows, C#, MS SQL Server, SCRUM.